From 9a36ad2cea9f598b31433334c60badfb1a61dbd5 Mon Sep 17 00:00:00 2001 From: wrongecho Date: Tue, 14 Jan 2025 00:28:49 +0000 Subject: [PATCH] Initial add Stripe Auto-payment with saved card --- portal/autopay.php | 22 +++++--- portal/index.php | 1 - portal/portal_header.php | 6 +- portal/portal_post.php | 116 ++++++++++++++++++++++++--------------- post/user/invoice.php | 5 +- scripts/cron.php | 7 ++- 6 files changed, 97 insertions(+), 60 deletions(-) diff --git a/portal/autopay.php b/portal/autopay.php index d1178d81..9f458574 100644 --- a/portal/autopay.php +++ b/portal/autopay.php @@ -92,14 +92,22 @@ if (!$config_stripe_enable || !$config_stripe_publishable || !$config_stripe_sec customers->retrievePaymentMethod( - $stripe_id, - $stripe_pm, - [] - ); + // Get payment method info (last 4 digits etc) + $payment_method = $stripe->customers->retrievePaymentMethod( + $stripe_id, + $stripe_pm, + [] + ); + + } catch (Exception $e) { + $error = $e->getMessage(); + error_log("Stripe payment error - encountered exception when fetching payment method info for $stripe_pm: $error"); + logApp("Stripe", "error", "Exception when fetching payment method info for $stripe_pm: $error"); + } $card_name = nullable_htmlentities($payment_method->billing_details->name); $card_brand = nullable_htmlentities($payment_method->card->display_brand); diff --git a/portal/index.php b/portal/index.php index a80c9bf9..eef09ea1 100644 --- a/portal/index.php +++ b/portal/index.php @@ -8,7 +8,6 @@ header("Content-Security-Policy: default-src 'self'"); require_once "inc_portal.php"; - ?>
New ticket diff --git a/portal/portal_header.php b/portal/portal_header.php index 53b34769..4bf730f5 100644 --- a/portal/portal_header.php +++ b/portal/portal_header.php @@ -57,17 +57,17 @@ header("X-Frame-Options: DENY"); // Legacy
Invoices Quotes - + Auto Payment
  • - -
    +
    Contacts Documents Domains diff --git a/portal/portal_post.php b/portal/portal_post.php index 16d670b2..eab9c817 100644 --- a/portal/portal_post.php +++ b/portal/portal_post.php @@ -453,18 +453,25 @@ if (isset($_POST['create_stripe_customer'])) { $stripe_client_details = mysqli_fetch_array(mysqli_query($mysqli, "SELECT stripe_id FROM client_stripe WHERE client_id = $session_client_id LIMIT 1")); if (!$stripe_client_details) { - // Initiate Stripe - $stripe = new \Stripe\StripeClient($config_stripe_secret); + try { + // Initiate Stripe + $stripe = new \Stripe\StripeClient($config_stripe_secret); - // Create customer - $customer = $stripe->customers->create([ - 'name' => $session_client_name, - 'email' => $session_contact_email, - 'metadata' => [ - 'itflow_client_id' => $session_client_id, - 'consent' => $session_contact_name - ] - ]); + // Create customer + $customer = $stripe->customers->create([ + 'name' => $session_client_name, + 'email' => $session_contact_email, + 'metadata' => [ + 'itflow_client_id' => $session_client_id, + 'consent' => $session_contact_name + ] + ]); + + } catch (Exception $e) { + $error = $e->getMessage(); + error_log("Stripe payment error - encountered exception when creating customer record for $session_client_name: $error"); + logApp("Stripe", "error", "Exception creating customer $session_client_name: $error"); + } // Get & Store customer ID $stripe_id = sanitizeInput($customer->id); @@ -507,20 +514,26 @@ if (isset($_GET['create_stripe_checkout'])) { $client_currency_details = mysqli_fetch_assoc(mysqli_query($mysqli, "SELECT client_currency_code FROM clients WHERE client_id = $session_client_id LIMIT 1")); $client_currency = $client_currency_details['client_currency_code']; - // Initialize stripe - require_once '../vendor/stripe-php-10.5.0/init.php'; - $stripe = new \Stripe\StripeClient($config_stripe_secret); - // Define return URL that user is redirected to once payment method is verified by Stripe $return_url = "https://$config_base_url/portal/portal_post.php?stripe_save_card&session_id={CHECKOUT_SESSION_ID}"; - // Create checkout session (server side) - $checkout_session = $stripe->checkout->sessions->create([ - 'currency' => $client_currency, - 'mode' => 'setup', - 'ui_mode' => 'embedded', - 'return_url' => $return_url, - ]); + try { + // Initialize stripe + require_once '../vendor/stripe-php-10.5.0/init.php'; + $stripe = new \Stripe\StripeClient($config_stripe_secret); + + // Create checkout session (server side) + $checkout_session = $stripe->checkout->sessions->create([ + 'currency' => $client_currency, + 'mode' => 'setup', + 'ui_mode' => 'embedded', + 'return_url' => $return_url, + ]); + } catch (Exception $e) { + $error = $e->getMessage(); + error_log("Stripe payment error - encountered exception when creating checkout session: $error"); + logApp("Stripe", "error", "Exception creating checkout: $error"); + } // Return the client secret to the js script echo json_encode(array('clientSecret' => $checkout_session->client_secret)); @@ -552,24 +565,31 @@ if (isset($_GET['stripe_save_card'])) { $stripe_client_details = mysqli_fetch_array(mysqli_query($mysqli, "SELECT stripe_id FROM client_stripe WHERE client_id = $session_client_id LIMIT 1")); $client_stripe_id = sanitizeInput($stripe_client_details['stripe_id']); - // Initialize stripe - require_once '../vendor/stripe-php-10.5.0/init.php'; - $stripe = new \Stripe\StripeClient($config_stripe_secret); + try { + // Initialize stripe + require_once '../vendor/stripe-php-10.5.0/init.php'; + $stripe = new \Stripe\StripeClient($config_stripe_secret); - // Retrieve checkout session - $checkout_session = $stripe->checkout->sessions->retrieve($checkout_session_id,[]); + // Retrieve checkout session + $checkout_session = $stripe->checkout->sessions->retrieve($checkout_session_id,[]); - // Get setup intent - $setup_intent_id = $checkout_session->setup_intent; + // Get setup intent + $setup_intent_id = $checkout_session->setup_intent; - // Retrieve the setup intent details - $setup_intent = $stripe->setupIntents->retrieve($setup_intent_id, []); + // Retrieve the setup intent details + $setup_intent = $stripe->setupIntents->retrieve($setup_intent_id, []); - // Get the payment method token - $payment_method = sanitizeInput($setup_intent->payment_method); + // Get the payment method token + $payment_method = sanitizeInput($setup_intent->payment_method); - // Attach the payment method to the client in Stripe - $stripe->paymentMethods->attach($payment_method, ['customer' => $client_stripe_id]); + // Attach the payment method to the client in Stripe + $stripe->paymentMethods->attach($payment_method, ['customer' => $client_stripe_id]); + + } catch (Exception $e) { + $error = $e->getMessage(); + error_log("Stripe payment error - encountered exception when adding payment method info: $error"); + logApp("Stripe", "error", "Exception adding payment method: $error"); + } // Update ITFlow mysqli_query($mysqli, "UPDATE client_stripe SET stripe_pm = '$payment_method' WHERE client_id = $session_client_id LIMIT 1"); @@ -579,9 +599,11 @@ if (isset($_GET['stripe_save_card'])) { $card_info = sanitizeInput($payment_method_details->card->display_brand) . " " . sanitizeInput($payment_method_details->card->last4); // Send email confirmation - $sql_settings = mysqli_query($mysqli, "SELECT * FROM settings WHERE company_id = 1"); - $row = mysqli_fetch_array($sql_settings); + // Company Details & Settings + $sql_settings = mysqli_query($mysqli, "SELECT * FROM companies, settings WHERE companies.company_id = settings.company_id AND companies.company_id = 1"); + $row = mysqli_fetch_array($sql_settings); + $company_name = sanitizeInput($row['company_name']); $config_smtp_host = $row['config_smtp_host']; $config_smtp_port = intval($row['config_smtp_port']); $config_smtp_encryption = $row['config_smtp_encryption']; @@ -589,12 +611,11 @@ if (isset($_GET['stripe_save_card'])) { $config_smtp_password = $row['config_smtp_password']; $config_invoice_from_name = sanitizeInput($row['config_invoice_from_name']); $config_invoice_from_email = sanitizeInput($row['config_invoice_from_email']); - $config_base_url = sanitizeInput($config_base_url); if (!empty($config_smtp_host)) { $subject = "Payment method saved"; - $body = "Hello $session_contact_name,

    We’re writing to confirm that your payment details have been securely stored with Stripe, our trusted payment processor.

    By agreeing to save your payment information, you have authorized us to automatically bill your card ($card_info) for any future invoices. The payment details you’ve provided are securely stored with Stripe and will be used solely for invoices. We do not have access to your full card details.

    You may update or remove your payment information at any time using the portal.

    Thank you for your business!

    ~
    $company_name - Billing
    $config_invoice_from_email
    $company_phone"; + $body = "Hello $session_contact_name,

    We’re writing to confirm that your payment details have been securely stored with Stripe, our trusted payment processor.

    By agreeing to save your payment information, you have authorized us to automatically bill your card ($card_info) for any future invoices. The payment details you’ve provided are securely stored with Stripe and will be used solely for invoices. We do not have access to your full card details.

    You may update or remove your payment information at any time using the portal.

    Thank you for your business!

    --
    $company_name - Billing Department
    $config_invoice_from_email
    $company_phone"; $data = [ [ @@ -639,12 +660,19 @@ if (isset($_GET['stripe_remove_card'])) { $payment_method = sanitizeInput($_GET['pm']); - // Initialize stripe - require_once '../vendor/stripe-php-10.5.0/init.php'; - $stripe = new \Stripe\StripeClient($config_stripe_secret); + try { + // Initialize stripe + require_once '../vendor/stripe-php-10.5.0/init.php'; + $stripe = new \Stripe\StripeClient($config_stripe_secret); - // Detach PM - $stripe->paymentMethods->detach($payment_method, []); + // Detach PM + $stripe->paymentMethods->detach($payment_method, []); + + } catch (Exception $e) { + $error = $e->getMessage(); + error_log("Stripe payment error - encountered exception when removing payment method info for $payment_method: $error"); + logApp("Stripe", "error", "Exception removing payment method for $payment_method: $error"); + } // Remove payment method from ITFlow mysqli_query($mysqli, "UPDATE client_stripe SET stripe_pm = NULL WHERE client_id = $session_client_id LIMIT 1"); diff --git a/post/user/invoice.php b/post/user/invoice.php index 64c9a3f8..343e5907 100644 --- a/post/user/invoice.php +++ b/post/user/invoice.php @@ -985,8 +985,9 @@ if (isset($_GET['add_payment_stripe'])) { $pi_livemode = $payment_intent->livemode; } catch (Exception $e) { - error_log("Stripe payment error - encountered exception during payment intent for invoice ID $invoice_id / $invoice_prefix$invoice_number:-"); - error_log($e->getMessage()); + $error = $e->getMessage(); + error_log("Stripe payment error - encountered exception during payment intent for invoice ID $invoice_id / $invoice_prefix$invoice_number: $error"); + logApp("Stripe", "error", "Exception during PI for invoice ID $invoice_id: $error"); } if ($payment_intent->status == "succeeded" && intval($balance_to_pay) == intval($pi_amount_paid)) { diff --git a/scripts/cron.php b/scripts/cron.php index 89ed505f..510bba2c 100644 --- a/scripts/cron.php +++ b/scripts/cron.php @@ -722,9 +722,10 @@ while ($row = mysqli_fetch_array($sql_recurring)) { $pi_livemode = $payment_intent->livemode; } catch (Exception $e) { - echo($e->getMessage()); - error_log("Stripe payment error - encountered exception during payment intent for invoice ID $new_invoice_id / $invoice_prefix$invoice_number:-"); - error_log($e->getMessage()); + $error = $e->getMessage(); + error_log("Stripe payment error - encountered exception during payment intent for invoice ID $new_invoice_id / $invoice_prefix$invoice_number: $error"); + logApp("Stripe", "error", "Exception during PI for invoice ID $new_invoice_id: $error"); + echo $error; } if ($payment_intent->status == "succeeded" && intval($balance_to_pay) == intval($pi_amount_paid)) {